FIM Criteria-Based Groups Filter Question
Good Afternoon! I work with a school district and I need to build criteria based groups for the teachers at each location. They need to include people that are explicitly assigned to those locations and people who have the location in the "notes" field. I am trying to create a filter that will perform the following: Office location is XXX Jobcode is 111 Jobcode starts with 22% OR Office Location starts with xx% Jobcode is 111 Jobcode starts with 22% So far, I've got the first part working. It looks like: /Person[(OfficeLocation = '001') and ((starts-with(JobCode, '810%')) or (starts-with(JobCode, '811%')) or (JobCode = '8120') or (JobCode = '8121') or (JobCode = '8122') or (JobCode = '8125') or (starts-with(JobCode, '819%')))] This filter works, but only catches the explicitly assigned people. What I have a problem with is adding the second part. When I do that, it switches everything to the same level.. Which adds tons of people to the group. Any help would be fantastic..
July 11th, 2011 11:18pm

There's a couple of ways to attack this. Here's one you might be able to use- Step 1- Create two criteria-based groups with each of your working criteria (first and second parts) Step 2 - Create another criteria-based group containing the members of both groups /Person[(ObjectID = /*[ObjectID = 'GUID of criteria group a']/ComputedMember) or (ObjectID = /*[ObjectID = 'GUID of criteria group ab]/ComputedMember)] You can also do something similar using sets in the place of groups by replacing "resourceID is member of 'group' " .. for groups with "resourceID in 'set' " .. for sets Hope this gives you some ideas about what you can do with this concept. -Frank
Free Windows Admin Tool Kit Click here and download it now
July 12th, 2011 2:15am

Firstly, the "notes" field in AD equates to the "info" attribute in the AD schema - I presume you've mapped this somehow to the OfficeLocation Person property in FIM via the sync engine? Anyhow, looking at your criteria, you could switch it around a bit to describe the same thing (note you don't need the % specified if you use the "starts-with" function ... the % wildcard is kind of doubling up): JobCode is 111 OR JobCode starts with 22 AND OfficeLocation is XXX OR OfficeLocation starts with xx In FIM query dialect this equates to: /Person[ ((JobCode='111') or starts-with(JobCode,'22')) and ((OfficeLocation='XXX') or starts-with(OfficeLocation,'XX'))] I suggest you paste the above in a dummy search scope (second tab) to refine your query, using line-feeds to help with the readability of your xpath. Keep refining it until you get the expected results, then pasting the xpath into the clipboard and editing the filter of your group (advanced settings). If you succeed in saving the updated group definition, you should find it visualizes correctly when you re-open your group and inspect your selection criteria. I can't see anything in your requirements which would prevent the visualizer from working correctly ...Bob Bradley (FIMBob!) ... now using Event Broker 3.0 @ http://www.unifysolutions.net/ourSolutions.cfm?solution=event for just-in-time delivery of FIM 2010 policy via the sync engine
July 17th, 2011 1:55am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics